Composing the Response: Building an Incident Pipeline from Scratch

Geet Pradhan

BSidesSF 2026 · Day 1 · AMC Theatre 13

In his compelling BSides SF talk, "Composing the Response: Building an Incident Pipeline from Scratch," security engineer Geet Pradhan addresses the critical challenges faced by lean security teams – often employee number one or two – operating with minimal budgets. Pradhan's presentation provides a pragmatic, experience-driven roadmap for developing robust **incident response (IR) pipelines** that enable organizations to transition from reactive panic to structured, efficient defense. The core premise revolves around the invaluable currency of time in cybersecurity incidents and how strategic automation can effectively "buy" precious minutes, fundamentally altering the outcome of an attack.

AI review

Competent, practitioner-honest talk aimed squarely at the 'employee number one' security hire who needs a framework, not a research paper. Pradhan doesn't pretend to be dropping novel theory — he's sharing operational scar tissue, and that's fine. The problem is the content is well-trodden enough that anyone who's read a NIST IR guide or sat through a Pagerduty blog post will find limited new ground.

Watch on YouTube